Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/Nh6WxS4YSH33EMROxlNF_G7CLOE.roa
File: Nh6WxS4YSH33EMROxlNF_G7CLOE.roa (raw, json)
Hash identifier: Iu1GnLh2swPkQSdd+yr/splclZF9P75oftacTYSnfQM=
Subject key identifier: 36:1E:96:C5:2E:18:48:7D:F7:10:C4:4E:C6:53:45:FC:6E:C2:2C:E1
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 18A6
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/Nh6WxS4YSH33EMROxlNF_G7CLOE.roa
Signing time: Fri 17 Jan 2025 01:25:21 +0000
ROA not before: Fri 17 Jan 2025 01:25:21 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 138527
IP address blocks: 45.252.24.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6310 (0x18a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Jan 17 01:25:21 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=361E96C52E18487DF710C44EC65345FC6EC22CE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ba:dd:f1:20:90:b0:8c:2f:5f:48:ef:b1:70:
26:30:5d:76:69:08:ee:1e:0f:0a:81:5e:00:c4:fa:
fd:fb:80:eb:9c:24:27:1a:be:c6:a7:11:b8:2a:5b:
81:12:ec:bb:1d:d9:f5:b6:b9:f8:ba:45:a7:73:c9:
64:ef:f5:d0:37:d8:8d:fb:e0:42:e7:5d:21:71:c2:
dc:62:4f:cb:6a:61:b8:72:c4:32:03:a0:57:14:80:
92:43:6c:c9:69:97:bd:8c:6e:a6:8c:29:3f:62:d7:
85:c4:f0:1f:82:fb:21:6a:43:87:eb:5f:d5:bd:38:
3d:ec:1d:f1:64:34:be:44:82:e8:c8:e7:ab:0d:50:
6d:0b:29:a4:5b:4a:b5:10:9b:a8:62:11:8f:18:42:
6f:db:bb:42:1f:e5:60:b6:ac:58:16:0c:74:a3:0f:
66:34:eb:34:94:f3:94:1d:be:9e:cc:aa:41:dd:e7:
5f:b0:72:7d:2e:30:50:9e:52:90:a0:fe:c8:85:57:
3d:1b:6f:a6:42:68:39:7d:57:9f:7c:7b:cc:62:ba:
47:4e:cb:2a:d2:d3:5b:9a:b7:bd:27:bd:8b:72:9b:
0f:15:72:53:a7:63:c2:ff:b2:6b:8b:f8:dd:78:a9:
92:10:ae:9c:f4:75:5c:7d:a7:5d:d0:45:30:0b:96:
87:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:1E:96:C5:2E:18:48:7D:F7:10:C4:4E:C6:53:45:FC:6E:C2:2C:E1
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/Nh6WxS4YSH33EMROxlNF_G7CLOE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.252.24.0/22
Signature Algorithm: sha256WithRSAEncryption
cc:34:44:ea:92:8e:7e:bb:86:e4:bf:bb:67:8b:8e:d7:15:2a:
2a:ca:e5:a4:fe:bc:a6:e3:27:ef:f5:5d:0c:a3:f4:47:dd:32:
c0:f5:65:85:34:d6:a3:a4:6b:b1:89:52:f3:52:30:44:0f:2d:
f0:93:cc:a9:5c:82:f0:cf:9c:c9:2c:8a:03:74:9a:ff:5a:75:
5b:04:32:eb:a3:0d:7b:13:c6:84:49:51:ad:b3:e9:8b:a3:71:
9f:27:33:a1:80:69:4e:f2:c5:19:29:08:7d:ce:43:f3:dd:3f:
fa:dc:b6:b3:bb:1c:b4:3b:a2:01:1f:53:eb:be:84:f3:63:ab:
ee:51:d6:40:8c:0c:49:ae:9d:8b:4a:fb:41:50:7f:b0:a4:d1:
11:9e:65:3c:16:e9:56:31:fa:17:e4:bd:1e:23:f6:1d:84:31:
24:8b:d3:63:81:6e:07:2d:5e:88:94:87:e4:b5:2e:1f:48:0e:
4b:31:ae:84:73:57:cd:02:cd:6c:7a:85:97:6a:74:20:31:46:
fa:02:59:fc:4b:f8:ae:34:e6:54:7e:47:f9:28:97:2a:e7:94:
9f:2b:26:c9:ed:0c:fb:05:fb:2f:08:02:f4:9f:5d:da:00:93:
6a:e4:88:f3:a5:c6:7d:f7:4c:cf:3f:b6:be:1b:29:18:a2:6b:
f3:33:01:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:42:39 2025 by rpki-client